To use 1Password behind a firewall, add port 443 and the following domains to your whitelist:
| Accounts on 1Password.com | Accounts on 1Password.eu | Accounts on 1Password.ca |
|---|---|---|
| *.1password.com | *.1password.eu | *.1password.ca |
| *.1passwordservices.com | *.1password.com | *.1password.com |
| *.1passwordusercontent.com | *.1passwordservices.com | *.1passwordservices.com |
| *.1passwordusercontent.eu | *.1passwordusercontent.ca |
Connections
1Password makes connections to the following domains for the purposes described:
| Domain | Purpose |
|---|---|
| *.1password.com / .ca / .eu | Various subdomains on these domains provide the core 1Password service. |
| *.1passwordservices.com | Various subdomains on this domain provide supporting services for 1Password, like Duo integration, telemetry, and subscription management. |
| *.1passwordusercontent.com / .ca / .eu | Provides user content for 1Password accounts, like saved files and profile pictures. |
| *.1password.com, app-updates.agilebits.com | Provides 1Password app updates. |
| *.1infra.net | Provides infrastructure identification within 1Password's network. |
| cache.agilebits.com | Provides icons for Logins and Software License items. |
| in.appcenter.ms | Provides crash report management in 1Password 7 for iOS and 1Password 7.9.10 and earlier for Mac. |
| accounts.brex.com, platform.brex.com | Provides support for Brex virtual cards. |
| fastmail.com, jmap.fastmail.com | Provides support for Masked Emails in Fastmail. |
| globalsign.com | Provides a check for code signature expiration dates on Windows when requested by the 1Password app. |
| lastpass.com and others | Provides support for the LastPass importer. Learn more about the ports and domains needed to connect to LastPass. |
| api.privacy.com | Provides support for Privacy Cards. |
| api.pwnedpasswords.com | Provides the vulnerable passwords feature in Watchtower using the Pwned Passwords service provided by haveibeenpwned.com. Learn more about Watchtower privacy. |